linkedin-mcp
LinkedIn MCP
MCP-сервер, который позволяет ИИ-ассистенту искать вакансии на LinkedIn и читать профили LinkedIn, управляя реальным окном Chrome через протокол DevTools.
Он только для чтения. Здесь нет инструментов для подключения, сообщений, одобрений, публикаций или откликов — не как настройка, а потому что код для этого не существует. Это осознанная граница: LinkedIn относится к автоматическому написанию гораздо строже, чем к автоматическому чтению, и смешение этих двух вещей приводит к ограничению аккаунтов.
Инструменты
Инструмент | Что возвращает |
| Список вакансий с названием, компанией, местоположением, типом рабочего места, зарплатой (если указана), давностью публикации и |
| Одна вакансия полностью — компания, местоположение, инсайты LinkedIn о вакансии и полное описание с развёрнутым блоком «See more». |
| Имя, заголовок, местоположение, текст «О себе», история опыта, образование и навыки. |
| Проверяет, выполнен ли вход в сохранённой сессии браузера. |
| Отключается от Chrome, оставляя окно и сессию нетронутыми. |
Related MCP server: LinkedIn MCP Server
Установка
Требуется Python 3.12+, uv и Google Chrome.
git clone https://github.com/TSS99/linkedin-mcp.git
cd linkedin-mcp
uv syncВойдите один раз. Это откроет окно Chrome и будет ждать, пока вы войдёте вручную — скрипт никогда не вводит учётные данные, потому что LinkedIn блокирует скриптовый ввод учётных данных:
uv run linkedin-mcp --loginСессия сохраняется в ~/.linkedin-mcp/chrome-profile. Проверить её можно в любой момент с помощью uv run linkedin-mcp --check, очистить — с помощью uv run linkedin-mcp --logout.
Каким профилем Chrome он управляет
По умолчанию сервер открывает одноразовый собственный профиль. Это окно будет выглядеть как новое — без закладок, расширений, и вход выполнен только в LinkedIn. В этом и смысл: сервер может видеть только LinkedIn.
Если вы предпочитаете, чтобы он управлял вашим обычным Chrome, чтобы использовать уже существующую сессию LinkedIn и не открывать чужое окно, задайте:
LINKEDIN_MCP_PROFILE_DIR=systemили укажите любой каталог профиля явно. В конфигурации MCP-клиента это помещается в блок env:
{
"mcpServers": {
"linkedin": {
"command": "uv",
"args": ["--directory", "/path/to/linkedin-mcp", "run", "linkedin-mcp"],
"env": { "LINKEDIN_MCP_PROFILE_DIR": "system" }
}
}
}Прежде чем это сделать, поймите две вещи:
Вам всё равно придётся один раз перезапустить Chrome. --remote-debugging-port действует только при запуске; его нельзя включить для уже работающего процесса. Поэтому к Chrome, который открыт прямо сейчас, невозможно подключиться, что бы ни говорила настройка профиля. Полностью закройте его (Cmd+Q, а не просто закройте окно) и позвольте серверу запустить его, или запустите сами командой, которую выводит --login.
Порт отладки не ограничен LinkedIn. Всё, что может получить доступ к 127.0.0.1:9224, может управлять каждой вкладкой в этом Chrome и читать каждую сессию в нём — вашу почту, ваш банк, всё — не только LinkedIn. В изолированном профиле больше ничего нет. В вашем обычном профиле есть всё. Запускайте так только на доверенной машине и закрывайте отладочный Chrome, когда закончите.
--logout отказывается удалять профиль, который он не создавал, поэтому указание на ваш настоящий Chrome не может стереть состояние вашего браузера.
Настройка
Добавьте в конфигурацию MCP-клиента (см. mcp-config.example.json):
{
"mcpServers": {
"linkedin": {
"command": "uv",
"args": ["--directory", "/path/to/linkedin-mcp", "run", "linkedin-mcp"]
}
}
}Для Claude Code: claude mcp add linkedin -- uv --directory /path/to/linkedin-mcp run linkedin-mcp
Как это работает и почему
CDP против реального профиля Chrome, а не запущенного браузера. Собственный Chromium от Playwright выдаёт себя десятками способов, которые проверяет LinkedIn. Подключение к реальному Chrome, в который вы вошли сами, сохраняет честность отпечатка и cookie. Сервер работает на отладочном порту 9224, поэтому он сосуществует с другими MCP-серверами, управляющими браузером, на портах 9222/9223.
Навигации замедлены. LinkedIn ограничивает частоту запросов, а не только объём, поэтому goto применяет минимальный интервал с джиттером. Долгий исследовательский прогон медленнее, чем мог бы быть, — намеренно.
Каждая строка в DOM LinkedIn встречается дважды — один раз видимая, один раз в visually-hidden span для программ чтения с экрана — поэтому сырой innerText читается как «Acme Corp\nAcme Corp». dedupe_lines схлопывает повторяющиеся строки; без этого каждое разобранное поле удваивается.
Селекторы — это упорядоченные списки запасных вариантов. Имена классов в LinkedIn обфусцированы и часто переименовываются. Где возможно, парсеры опираются на то, что пережило смену классов — атрибут data-occludable-job-id, стабильные якорные id div#experience — и в качестве запасного варианта разбирают порядок строк в тексте карточки, а не доверяют хуку на каждое поле.
Сломанный парсинг никогда не возвращает пустой результат. Каждый инструмент обёрнут так, что отсутствующий якорь возвращается как {"status": "error", "error_type": "stale_selector", ...} с указанием селектора и URL. LLM, получив [], с полной уверенностью сообщит «вакансий не найдено»; это позволяет отличить поломку инструмента от реального отсутствия результатов.
Тесты
uv run pytestТесты покрывают чистые парсеры — построение URL/фильтров, разбор карточек, разбор записей профиля, дедупликацию строк — на фикстурах в том виде, в каком DOM LinkedIn их реально выдаёт. Им не нужен браузер и сеть.
Когда что-то ломается
Это случится. LinkedIn постоянно меняет разметку, а скрапер — это предположение о чужом HTML. Ожидайте ошибок stale_selector; обычно исправление — это ещё одна запись в списке селекторов в tools/jobs.py или tools/profiles.py, плюс фикстура в tests/test_parsers.py.
Если вы получаете auth_required с URL checkpoint, LinkedIn требует человека: откройте окно Chrome, пройдите проверку и повторите попытку.
О условиях использования
Автоматический доступ противоречит Пользовательскому соглашению LinkedIn, независимо от того, насколько аккуратна реализация, и LinkedIn действительно ограничивает аккаунты за это. Это личный исследовательский инструмент; конструкция «только для чтения» и замедленные запросы снижают риск, но не устраняют его, и аккаунт, на который вы его направляете, несёт этот риск. Используйте своё суждение.
Лицензия
Apache-2.0
Available Tools
5 toolslinkedin_check_sessionA
Check whether the browser is signed in to LinkedIn.
Every other tool needs this to be true; LinkedIn serves a login wall to anonymous visitors on job listings and profiles alike.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral burden. It states the check itself but does not explicitly confirm it is non-mutating or describe the return format. The login-wall context implies safety, but the description lacks explicit boundary details. It does not contradict anything, but could be more transparent about side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler. The purpose is stated first, and the second sentence adds valuable context about why this tool matters. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless check with no output schema, the description fully covers what an agent needs: what the tool does and why it's important before other tools. It is complete and self-sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the schema is already complete (100% coverage). Baseline is 4. The description adds no parameter information, which is appropriate since there are none to document.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states a specific verb ('check') and resource ('whether the browser is signed in to LinkedIn'). The description distinguishes it from sibling tools by its unique purpose—session verification—and adds context about the login wall, making it unambiguous what this tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states that 'every other tool needs this to be true,' implying it should be called before other LinkedIn operations. This provides clear usage context. It does not list exclusions or alternatives, but given its singular nature, the guidance is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_close_sessionA
Disconnect from the browser and free resources.
This detaches from Chrome; it leaves the window and the saved session alone.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It transparently discloses the key side effect: it does NOT close the window or the saved session, and it indicates resource freeing. This goes beyond a simple 'close session' and prevents the agent from assuming destructive behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero waste. The core action is front-loaded, and the clarifying sentence adds essential side-effect information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless tool with no output schema, the description is sufficient. It covers what it does and what it doesn't do. One could add typical usage timing (e.g., 'call at end of session'), but that is minor and not strictly necessary for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so schema coverage is trivially 100%. The description adds no parameter meaning because none exist; per rubric, a baseline of 4 is appropriate for a parameterless tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'Disconnect from the browser and free resources.' It further clarifies by specifying it detaches from Chrome and leaves the window and saved session intact, distinguishing it clearly from the search/get/check siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no explicit when-to-use or when-not-to-use guidance. It does not mention that it should be used after other LinkedIn operations or contrast itself with linkedin_check_session. The implication is present but not stated, leaving the agent to infer usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_get_jobA
Get the full detail for one job posting.
Returns the title, company, location, posted age, LinkedIn's job insights (seniority, employment type, headcount) and the complete job description with the "See more" clamp expanded.
| Name | Required | Description | Default |
|---|---|---|---|
| job | Yes | Job id, or a /jobs/view/<id> LinkedIn URL |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must bear the burden. It discloses the output content, including the 'See more' clamp expansion, which is a concrete behavior. However, it does not mention prerequisites like authentication needs, rate limits, or error behavior. For a read operation, this is acceptable but not exhaustive, so a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two efficient sentences. The first states the overall purpose, and the second lists the return fields with the clamp expansion noted. No fluff, front-loaded key info, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description lists the return values in detail, providing adequate information for an agent to know what to expect. It does not cover prerequisites like active sessions (sibling check_session exists) or error cases, but for a simple GET with clear return fields, it is nearly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for the single parameter, already specifying it accepts a job ID or URL. The description itself does not add additional semantics beyond what the schema provides. Baseline 3 is correct given the schema's completeness.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves full details for a single job posting and enumerates the exact fields returned (title, company, location, posted age, insights, complete description). This verb+resource focus distinguishes it from siblings like search, profile, and session tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage: it requires a job ID or URL to retrieve full details. The context is clear that this is for a single job, not searches or profiles, but it does not explicitly mention when not to use it or name alternatives. Still, for a straightforward GET tool, the usage context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_get_profileA
Read a LinkedIn profile.
Returns name, headline and location, plus the about text, experience history, education and listed skills unless include_sections is false.
Set include_sections to false when you only need to confirm who someone is; it is one page load either way but a much smaller result.
| Name | Required | Description | Default |
|---|---|---|---|
| profile | Yes | Profile slug, e.g. 'satyanadella', or a full /in/<slug> URL | |
| include_sections | No | Include about, experience, education and skills |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It transparently discloses the return content and the page-load trade-off, but omits any session/auth prerequisite or error behavior. This is partially transparent but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three terse sentences, each earning its place: purpose, returns, and the parameter trade-off. The essential information is front-loaded with zero fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only profile tool with no output schema, the description covers what's returned and the parameter option. It omits explicit session requirements, but sibling tools (check_session/close_session) imply that context, so it's not a critical gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are documented. The description adds value for include_sections by explaining the decision rule and its result-size impact, and reinforces the profile format. This exceeds the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear verb-resource pair ('Read a LinkedIn profile') and then lists the specific fields returned (name, headline, location, about, experience, education, skills). This unambiguously distinguishes it from sibling job-search and session tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose is explicit, and the include_sections guidance gives a concrete conditional ('Set include_sections to false when you only need to confirm who someone is') with a performance trade-off. It doesn't explicitly contrast with siblings, but the domain is distinct enough that this is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linkedin_search_jobsA
Search job listings on LinkedIn.
Returns each listing with title, company, location, workplace type, posted salary where the employer provided one, how long ago it was posted, and the job_id. Pass that job_id to linkedin_get_job for the full description rather than re-searching.
Results are paged 25 at a time, so a large limit means several page loads.
| Name | Required | Description | Default |
|---|---|---|---|
| sort | No | Order: 'date' or 'relevance' | |
| limit | No | Maximum number of results | |
| job_type | No | One of: full-time, part-time, contract, temporary, internship, volunteer, other | |
| keywords | Yes | Search keywords, e.g. 'machine learning engineer' | |
| location | No | City, region or country, e.g. 'Bengaluru' or 'India' | |
| easy_apply | No | Restrict to Easy Apply listings | |
| workplace_type | No | One of: on-site, remote, hybrid | |
| experience_level | No | One of: internship, entry, associate, mid-senior, director, executive | |
| posted_within_days | No | Only jobs posted within this many days |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that results are paged 25 at a time and that salary may be absent, but it does not mention authentication/session requirements or rate limits. With no annotations provided, the description carries the full burden, and the existence of linkedin_check_session suggests a session prerequisite that is not mentioned. This is a notable gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is about 100 words, front-loaded with the main purpose, and the second paragraph covers pagination. It avoids redundancy and each sentence contributes value, such as noting the paging limit and the alternative tool. No fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the return fields and pagination, and guides to linkedin_get_job, which covers essential operational details. However, it does not mention prerequisites like an active LinkedIn session (implied by check_session sibling) or error/edge-case behavior. Given the parameter count and no output schema, the description is fairly complete but misses these key operational aspects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides 100% description coverage for all 9 parameters, so the schema already documents their meaning. The description does not add additional parameter semantics beyond what the schema offers (e.g., it does not clarify how sort values map to behavior or the exact format of location). Baseline 3 is appropriate given the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool searches LinkedIn job listings, and explicitly distinguishes itself from the sibling linkedin_get_job by instructing to pass the returned job_id to that tool for full descriptions. This separates purpose from the retrieval sibling without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly tells the agent to use linkedin_get_job for the full description rather than re-searching, which is a clear directive about when to use an alternative. It also implicitly distinguishes from profile/session tools by focusing on job search, so usage context is evident.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.1.0- First observed
linkedin_check_session - First observed
linkedin_close_session - First observed
linkedin_get_job - First observed
linkedin_get_profile - First observed
linkedin_search_jobs
TDQS
Scored across 5 tools
Each tool has a clearly distinct purpose: searching jobs, fetching job details, reading profiles, and managing session state. No overlap between the data-access tools and the session-management tools.
All five tools follow a consistent 'linkedin_<verb>_<noun>' pattern (search_jobs, get_job, get_profile, check_session, close_session). The naming is uniform and predictable.
Five tools is well within the ideal range for a focused server. Every tool contributes to a clear workflow: session management, job search, job details, and profile lookup.
The server covers the core read workflows for LinkedIn jobs and profiles, but lacks profile search or listing capabilities. However, for its stated purpose (searching jobs and reading profiles), the surface is largely complete.
Maintenance
Related MCP Connectors
LinkedIn jobs, companies and people for AI agents, plus messages and invites via your own account.
LinkedIn for AI agents: search people, read profiles, posts and connections via a connected account
LinkedIn for AI agents: inbox, invitations, Sales Navigator search, posts, jobs, quotas, webhooks.
Give AI agents the LinkedIn tools to find, qualify, engage, and follow up with prospects.
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables AI assistants to interact with LinkedIn by scraping profiles, companies, job postings, and getting personalized job recommendations using authenticated browser automation.1711,396 PyPI4,026Apache 2.0
- AlicenseAqualityBmaintenanceEnables searching and scraping of LinkedIn for structured data on people, companies, and job listings. It allows AI clients to retrieve detailed profiles, experience, and activity sections using browser automation.7207MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to search, filter, and extract job listings from LinkedIn using an automated headless browser with semantic AI filtering and deduplication.11 npmMIT
- AlicenseAqualityBmaintenanceLets an AI assistant operate LinkedIn through an authenticated browser session, enabling profile management, posting, networking, messaging, job search, and automated applications.10010 npm1MIT